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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re Patent Application of: 

Daniel SCHREIBER, et al. Group Art Unit: 2135 

App. Serial No.: 09/730,326 Examiner: Beemnet W. Dada 

Patent No.: 7,155,744 

Filing date: December 4, 2000 

Issue date: December 26, 2006 

For: COPYRIGHT PROTECTION OF DIGITAL IMAGES TRANSMITTED 

OVER NETWORKS 



PETITION TO ACCEPT UNINTENTIONALLY DELAYED CLAIM OF PRIORITY 
UNDER 37 C.F.R. 1.55(c) AND REQUEST FOR CERTIFICATE OF CORRECTION 



U.S. Patent and Trademark Office 
Mail Stop: Petitions 
Randolph Building 
401 Dulany Street 
Alexandria, VA 22314 

Sir: 

Applicant respectfully petitions for the acceptance of an unintentionally delayed claim of 
priority under 37 C.F.R. 1.55(c) for the benefit of foreign applications/patents (IL 124895, IL 
127093, and IL 127869) filed in parent applications (Serial Nos. 09/313,067, now U.S. Patent 
No. 6,209,103, and 09/397,331, now U.S. Patent No. 6,298,446). In conjunction with this 
Petition, Applicant submits a Certificate of Correction to add the foreign applications/patents on 
the face of the patent. 

The present application claims priority to and is division of Serial No. 09/397,331, now 
U.S. Patent No.. 6,298,446, which claims priority to foreign applications/patents IL 127093 and 
IL 127869, and which is a continuation-in-part of U.S. Application No. 09/313,067, now U.S. 
Patent No. 6,209,103, which claims priority to foreign application/patent No. IL 124895. 
Pursuant to MPEP 201.16, a Certificate of Correction can be filed to perfect a claim of foreign 
priority benefits based on the satisfaction of the requirements of 35 U.S. C. 1 19(a)-(d) or (f) in the 
parent application. These requirements were met in the parent applications (Serial Nos. 
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09/397,331 and 09/313,067), and we request that foreign applications/patents IL 124895, IL 
127093, and IL 127869 be added to the present patent. 

With regard to foreign applications/patents Nos. IL 127093 and 127869, these 

applications/patents were claimed in the parent application (Serial No. 09/397,331) and were 

cited in the executed Declaration filed on the parent application. The claim was perfected on 

September 18, 2000 with the filing of the certified priority documents for each of the foreign 

applications/patents. A copy of the executed Declaration is attached as Exhibit A. A copy of the 

certified priority document for each foreign application/patent is attached as Exhibit B. On May 

2, 2001, a Notice of Allowance was mailed by the U.S. Patent and Trademark Office in the 

parent application in which the Examiner acknowledged the claim for foreign priority and 

acknowledges receipt of the certified priority documents. A copy of the Notice of Allowance is 

attached as Exhibit C. 

With regard to foreign application/patent No. IL 124895, this application/patent was 

claimed and perfected in the parent application (Serial No. 09/3 13,067). A copy of the certified 

priority document for application/patent No. IL 124895 is attached as Exhibit D. 

Applicant submits that the entire delay between the date the claim was due under 37 CFR 
§ 1 .55(a) and the date the claim was filed was unintentional. 

Payment of the $1,640 fee as required under § 1.17(f), § 1.17(f), § 1.20(a) is included 
herewith. The Commissioner is authorized to charge any underpayment of fees, or to credit any 
overpayment, to Deposit Account No. 50-4402. 
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Applicant respectfully requests that this Petition and the accompanying Certificate of 
Correction be granted and entered. 



Respectfully submitted, 

Date: August 25, 2011 By: /Dawn-Marie Bey - 44.442/ 

Dawn-Marie Bey 
Reg. No. 44,442 

King & Spalding LLP 

1700 Pennsylvania Avenue, N.W. 

Suite 200 

Washington, DC 20006 
(202) 626-8978 (Office) 
(202) 626-3737 (Fax) 

15157/105001 
Doc. No. 17142121 
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Docket No. 
6866-101C1 



Declaration and Power of Attorney For Patent Application 



As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, 

first and joint inventor (if plural names are listed below) of the subject matter which is claimed and for 

which a patent is sought on the invention entitled 

METHOD AND SYSTEM FOR COPYRIGHT PROTECTION OF 
DIGITAL IMAGES TRANSMITTED OVER NETWORKS 

the specification of which 

(check one) 

□ is attached hereto. 

H was filed on September 14, 1999 as United States Application No. or PCT International 

Application Number 09/397,331 

and was amended on 



I hereby state that I have reviewed and understand the contents of the above identified specification, 
including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose to the United States Patent and Trademark Office all information 
known to me to be material to patentability as defined in Title 37, Code of Federal Regulations, 
Section 1.56. 

I hereby claim foreign priority benefits under Title 35, United States Code, Section 119(a)-(d) or 
Section 365(b) of any foreign application(s) for patent or inventor's certificate, or Section 365(a) of 
any PCT International application which designated at least one country other than the United States, 
listed below and have also identified below, by checking the box, any foreign application for patent or 
inventor's certificate or PCT International application having a filing date before that of the application 
on which priority is claimed. 

Prior Foreign Application(s) Priority Not Claimed 



127093 Israel November 16, 1998 

(Number) (Country) (Day/Month/Year Filed) 

127869 Israel December 30, 1998 

(Number) (Country) (Day/Month/Year Filed) 



English Language Declaration 



(if applicable) 



□ 



(Number) 



(Country) 



(Day/Month/Year Filed) 



Farm PTO-S 



)1 (9-95) (Modified) 



P02/REV02 



Patent and Tra 



; Office-U.S. DEPARTMENT OF COMMERCE 
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I hereby claim the benefit under 35 U.S.C. Section 119(e) of any United States provisional 
application(s) listed below: 



(Application Serial No.) 


(Filing Date) 


(Application Serial No.) 


(Filing Date) 



(Application Serial No.) 



(Filing Date) 



I hereby claim the benefit under 35 U. S. C. Section 120 of any United States application(s), or 
Section 365(c) of any PCT International application designating the United States, listed below and, 
insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States or PCT International application in the manner provided by the first paragraph of 35 
U.S.C. Section 112, I acknowledge the duty to disclose to the United States Patent and Trademark 
Office all information known to me to be material to patentability as defined in Title 37, C. F. R., 
Section 1.56 which became available between the filing date of the prior application and the national 
or PCT International filing date of this application: 



(Application Serial No.) 



Pending 



(Status) 

(patented, pending, abandoned) 



(Application Serial No.) 



(Filing Date) 



(Status) 

(patented, pending, abandoned) 



(Application Serial No.) 



(Filing Date) 



(Status) 

(patented, pending, abandoned) 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements 
were mads with the knowledge that willful false statements and the like so made are punishable by 
fine or imprisonment, or both, under Section 1 001 of Title 1 8 of the United States Code and that such 
willful false statements may jeopardize the validity of the application or any patent issued thereon. 
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POWER OF ATTORNEY: As a named inventor, I hereby appoint the following attorney(s) and/or 

agent(s) to prosecute this application and transact all business in the Patent and Trademark Office 

connected therewith, (list name and registration number) 

Robert Berliner, Registration No. 20,121 

Billy A. Robbins, Registration No. 18,313 

M. John Carson, Registration No. 25,090 

John M. May, Registration No. 26,200 

Margaret A. Churchill, Registration No. 39,944 

Terri A. Sale, Registration No. P45,066 



Send Correspondence to: 

Robert Berliner, Esq. - FULBRFGHT & JAWORSKI L.L.P. 
865 South Figueroa Street -29th Floor 

Los Angeles, CA 90017-2576 

Direct Telephone Calls to: (name and telephone number) 
Robert Berliner, Esq. - 213-892-9200 



Date , 



Post Office Address 

71 Shimon Street, Beit Siiemesh 99543, ISRAEL 



} . johln 
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I Docket No.: 4692 



I ~ A PP'ica"t(s): Da niel Schreiberau. „ „„ m „ 

i NET^ORKS^ ^" UK COPYRIGHT PROTECTI ON Uh Lllul I AL IMAGES TRANSMITTED OVER 



Please imprint Patent Office "date stamp" hereon to indicate receipt and then return card to addressee 



□ _ pages of Specification, Claims, & Abstract 
D sheets of formal drawings 

□ Provisional Application Cover Sheet 

□ New Utility Application Transmittal 
13 Transmittal 

□ Fee Transmittal (in duplicate) 

□ Power of Attorney by Assignee 

□ Copy of Assignment & Recordation Cover Sheet 

□ Small Entity Statement 

□ New Design Application Transmittal 

□ CPA Request Transmittal. 

□ Check in the amount of $ 

£3 Other Israeli application nos. 127093 and 



□ Amendment/Response 

□ PTO-1533 & Resp. to Notice Of Missing Parts 
£3 Certified Copy of Priority Document(s) 

□ Certificate Under 37 CFR § 3.73(b) 

□ IDS, PTO-1449, and cited references 
23 Return receipt postcard 

□ Letter to Chief Draftsperson 

□ Formal Drawings: sheets 

□ Maintenance Fee Payment, 

□ Request for Certificate of Corrs 

□ Notice of Appeal 

□ Express Mail No. 

127869 
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PTO/SB/21 (modified) 
Approved for use through xx/xx/xx, OMB 0651-0031 
Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE 



TRANSMITTAL FORM 



Application Number 



First Named Inventor 



Group Art Unit Number 



Examiner Name 



September 14, 1999 



Daniel Schrelber 



Total Number of Pages in This Submission 48 



Attorney Docket Number 



ENCLOSURES 

03 Fee Transmittal Form (in duplicate) 

03 Check Enclosed 
^ Return Receipt Postcard 
03 Response to Notice to File Missing Parts 
I I Assignment & Recordation Cover Sheet 
03 Declaration 

□ Small Entity Statement 

□ Information Disclosure Statement & PTO-1449 

□ Copies of IDS Cited References 
Q Request for Corrected Filing Receipt 

03 Request for Correction of Recorded Assignment 

□ Amendment/Response: [ ] Page(s) 

□ After Final 
03 Status Request 

03 Revocation and Power of Attorney 



(check all that apply) 



03 Issue Fee Transmittal 
[3 Letter t° Chief Draftsperson 
I I Formal Drawing(s): 

[ ] Sheet(s) of Figure(s) [ ] 
(3] Appeal Communication to Board of Appeals ai 

Interferences 
03 Appeal Communication to Group 

(Appeal Notice, Brief, Reply Brief) 
(3 Certified Copy of Priority Documents) 
[3 After Allowance Communication to Group 
^ Israeli application nos. 127093 and 127 869 
D 

□ 

n ' 

□ ~ 

□ ~~ ' 



SIGNATURE OF ATTORN EY OR AGENT 



Attorney/Reg. No.: 



Daniel R. Brownstone, Reg. No. P-46,581 



I ^ted: £U / 3jZ£ 



CERTIFICATE OF MAILING 



hereby certify that this correspondence, 
irst class mail In an envelope addressed 
Washington, D.C. 20231 on the date shown below. 
deposited with the United-States Postal Service "Express 



including the enclosures Identified above, is being deposited with the United States Postal Service as 
"*" if Examiner Bryce P. Bonzo, Group Art Unit 2785, Commissioner for Patents, 

Express Mail Mailing Number is filled in below, then this correspondence Is being 
'tee pursuant to 37 CFR1.10. 



All 



Typed or Printed Name!"] Daniel R. iBro^nstona 



Express Mail Mailing Number (optional): | 



21 939/04692/DOCS/i 092097.1 
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_Da te_Malled: 09/1 3/nn 




n . ~ ""iiutOUVER 

Hease Imprint Patent Offir-o < — 

D ch^^x.. . ^ □ Amendment/Response 



□ _ sheets of formal drawings 

□ Provisional Application Cover Sheet 

□ New Utility Application Transmitta, 
IS Transmittal 

□ Fee Transmittal (in duplicate) 

□ Power of Attorney by Assignee 

□ Small Entity Statement 

□New Design Appiication Transmittal 
U CPA Request Transmittal 

□ Check in the amount of 



3 Other: israeli appiicaSon nos. 1 27093 ma 12786 g 



□ PTO-1533 & Re S p. toNotite0f 

Seeded Copy ofPnonty Document 

□ Certificate Under 37 CFR§ 3.73(b) 

□ 108^10^449. and dted references 
OS Return receipt postcard 

□ Letter to Chief Draftsperson 

□ Formal Drawings: _ sneets 

□ Maintenance Fee Payment 

□ Request for Cerfficate of Correction 

□ Notice of Appeal 

□ Express Mail No. 



rvsiAGE Will BE PAID BY ADDRE5S£E 

ATTN Patent Department 
Fenwick & West LLP 
TWO Palo Alto Square 
Palo Alto CA 94306-9752 
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IN THE UNITED STATES PATENT AND TRADEMARK 

APPLICANTS: Daniel Schreiber and Andrew Goldman 
SERIAL NO: 09 / 397,331 

FILED: September 14, 1999 

TITLE: Method and System For Copyright Protection of Digital 

Images Transmitted Over Networks 



EXAMINER: 
ART UNIT: 
ATTY. DKT. NO.: 



Bryce P. Bonzo 

2785 

4692 



CERTIFICATE OF MAILING 

I hereby certify that this correspondence is being deposited with the United States Postal Service as first class mail ir 
envelope addressed to the attention of Examiner Bryce P. Bonzo, Group Art Unit 2785, CommissioKEr for Patents, 
Washington, D.C. 2023 1 , on the date shown below: 



Dated: ?// z/'Z*** 



By:J 



Daniel R. Brownstone, Reg. No. P-46,581 



COMMISSIONER FOR PATENTS 
WASHINGTON, D.C. 20231 



ATTENTION : 

EXAMINER BRYCE P. BONZO 
GROUP ART UNIT 2785 



TRANSMITTAL OF CERTIFIED COPIES 



Attached are the certified copies of the foreign applications from which priority is 
claimed for this case: 



Country: 

Application Number: 
Filing Date: 

Country: 

Application Number: 
Filing Date: 



Israel 
127093 

November 16, 1998 

Israel 
127869 

December 30, 1998 



21939/04692/DOCS/1092084. ll 
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If the Examiner should have any questions, the Examiner is requested to call the 
undersigned attorney. 



Respectfully submitted, 

DANIEL SCHREIBER AND ANDREW 

GOLDMAN 



By:jU-o _ 
Daniel R. Brownstone, Reg. No. P-46,581 
Fenwick & West LLP 
Two Palo Alto Square 
Palo Alto, CA 94306 
Tel.: (415) 875-2358 
Fax.: (415) 281-1350 
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Anlc/Post-dalcs 



CSAFE LTD. 
P.O.B.2361 
Givat Sharett 
Beit Shemesh 

(An Israeli company) 

Nin itoot Bv Law 

Owner, by virtue of 



1967 -- vo\ynn .cwioon pin 

PATENTS LAW, 5727-1967 

Application for Patent 

C33096 

(mn»mn oipn - ™™ n» " WD • w P' 2Dn Dvy) .'' 3 * 
I (Name and address of applicant, and, in case of body corporate-place of incorporate) 

<y>->o>u 
2361 .T .n 

rnvy nym 
(rt>bN~i\y> man) 



y>m n:?o n 



of an invention, the title of which is 



nvira D'^ap Jipjwn 'jsa rmn 

(Hebrew) 



NETWORK FILE COPY PROTECTION 



(English) 



iy apply for a patent to be granted 



le in respect thereof 



- np^n rwpn* 
Application for Divis 



from Application 



dated_ 



to Palenl/Appl. 



daled_ 



DVD 

vnv tiv / nu irn - mi'D/'to = ro 
P.O.A.: general / individual - attached / to be filed later - 

filed in— 



Address for Service in Israel 
Ranfnrrl T. Colb & Co. 



P.O.B. 2273 



Rshnvot 76122 



nnnp v T nW 
Priority Clai 



Number/Mark 



For the Applicant, 



Sanford T. Colb & Co. 
C:33096 



vjpunn no'Jin 
S ignalurc of Applicant 



Convention Counuy 



1998 



December wan . 



of the year 



For Office Use 
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FIELD OF THE INVENTION 
The present invention relates to network security in general and particularly to 
methods and apparatus for preventing unauthorized copying of files transmitted via computer 



networks. 



BACKGROUND OF THE INVENTION 
Preventing unauthorized copying of files transmitted via computer networks is 
difficult given the current state of the art. Typically, a computer terminal or "client" connected to a 
network, such as the Internet, sends a request to a "server" also connected to the network. Such 
requests are often for files known as "web pages," documents constructed using Hypertext Markup 
Language or HTML, and their associated files which may contain images, sound, or other data. The 
files are then sent by the server to the client where the files may be output, often using software 
known as a "browser" which displays web pages, images, and plays sound files. Requested files are 
typically received at the client in a standard format such as GIF, JPEG, or MIDI and automatically 
stored at the client, and may be easily copied, pasted, and altered, allowing for unrestricted future 
reuse, often in violation of copyright laws. 



SUMMARY OF THE INVENTION 
The present invention seeks to provide improved methods and apparatus for 
preventing unauthorized copying of files transmitted via computer networks that overcome the 
known disadvantages of the prior art as discussed above.. 

There is thus provided in accordance with a preferred embodiment of the present 
invention a method for preventing unauthorized copying of files sent from a first computer to a 
second computer. The method comprises the following steps: 

1 
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(a) sending a request for a file from the second computer to the first computer; 

(b) determining at the first computer, in response to the request, whether the file 
is to be protected and, if so, protecting the file; 

(c) sending the protected file to the second computer; 

(d) disabling file copying capabilities at the second computer; 

(e) unprotecting the file at the second computer; and 

(f) outputting the file at the second computer. 



In a preferred embodiment any of the sending steps comprises sending via a 



network. 



Preferably the first computer is a server and the second computer is a client. 

Preferably the determining step (b) comprises protecting the file by encrypting the 
file using an encryption key and the unprotecting step (e) comprises decrypting the encrypted file 
using the encryption key. 

In many cases the second computer may be configured with a MICROSOFT 
WINDOWS operating system. Thus the disabling step (d) comprises trapping any of print screen, 
bitblt, stretchblt, and getpixel function calls and, in response to the trapping, replacing contents of a 
clipboard associated with the operating system with substitute contents. 

Alternatively or additionally in such a case disabling step (d) comprises trapping any 
of print screen, bitblt, stretchblt, and getpixel function calls and, in response to the trapping, 
marring contents of a clipboard associated with the operating system. 
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Preferably the outputting step (f) comprises displaying the file on a computer 

monitor. 

If appropriate, the outputting step (f) may comprise outputting the file as sound. 
The method may comprise the further step of 

(g) maintaining at the first computer a list of files to be protected, the 
determining step (b) comprising determining whether the file requested in step (a) is in the list of 
files. 



1 In a further embodiment the method comprises the following additional steps prior 

to the sending a request step (a): 

(h) sending a request for an HTML file from the second computer to the 

first computer; 

(i) determining at the first computer, in response to the request, whether 
the HTML file comprises an instruction to retrieve a file to be protected; 

0) modifying the HTML file by replacing the instruction with an 
instruction to invoke a protection module for use in retrieving the file to be protected; and 
(k) sending the modified HTML file to the second computer. 

Preferably, the stage of modifying the HTML file step (h) comprises replacing the 
name of the file to be protected with a substitute file name. 

Preferably, modifying the HTML file step (h) comprises deriving the substitute file 
name from the name of the file to be protected using a predetermined file name derivation 

3 
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algorithm. 



rn one embodiment the procedure is modified as follows, 

(I) maintaining at the first computer a mapping of names of files to be protected 
to corresponding substitute file names, and wherein the determining step (b) comprises determining 
whether the name of the file requested in step (a) is a substitute file name in the mapping and, if so, 
protecting the file to be protected corresponding to the substitute file name. 

An embodiment further comprises configuring the second computer with the 
protection module. 

Preferably the protection module periodically checks a third computer for an 
updated component of the protection module and, if found, downloads the updated component. 

In an embodiment determining step (b) comprises protecting the file by encrypting 
the file using an encryption key together with a predetermined hash value incorporated therein, and 
further comprising configuring the second computer with a protection module operative to hash a 
software component of the protection module, thereby deriving the predetermined hash value, and 
incorporate the hash value into the encyption key, and wherein the unprotectmg step (e) comprises 
decrypting the encrypted file using the encryption key together with the derived hash value. 

A particularly preferred embodiment further comprises configuring the second 
computer with a blacklist of known software applications, and wherein the outputting step (f) 
comprises outputting only if none of the blacklisted applications are currently running on the 
second computer. 
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According to a second aspect of the present invention there is provided a method for 
serving a CGI request by proxy, the method comprising: 

sending a CGI request from a client to a server; 

forwarding the CGI request from the server to a filter; 

appending at the filter an identifier to the CGI request; 

sending the CGI request with identifier from the filter to the server; 

forwarding the CGI request with identifier from the server to a filter; 

removing at the filter the identifier from the CGI request; 
sending the CGI request from the filter to a CGI program; 
processing the CGI request at the CGI program; 
receiving at the server results from the CGI program; 
sending the results from the server to the filter; 
processing the results at the filter; and 
sending the processed results to the client. 



According to a third aspect of the present invention there is provided a method for 
serving an aliased HTTP request, the method comprising: 

sending a request for a file from a client to a first server; 

issuing a substitute HTTP request corresponding to the requested file to a second 

server; 

receiving at the first server results of the substitute HTTP request; 
processing the results at the first server; and 
sending the processed results to the client. 
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It is noted that throughout the specification and claims the term "user" as it is used 
with respect to the use of a computer may refer to a human or surrogate therefor in combination 
with the computer with which the human or surrogate interacts. Thus, unless otherwise specified, a 
reference to a user may connote a reference to the user's computer, and a reference to a user's 
computer may connote a reference to the user. 

It is further noted that throughout the specification and claims the term "file- 
includes any collection of data that may be stored in a computer memory, on magnetic storage 
media, or any storage means for use with and/or by a computer. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will be understood and appreciated more fully from the 
following detailed description, taken in conjunction with the drawings in which: 

Fig. 1 is a simplified block diagram of a system for preventing unauthorized copying 
of files, the system constructed and operative in accordance with a preferred embodiment of the 
present invention; 

Figs. 2A and 2B, taken together, are simplified pictorial flow illustrations of a 
method of operation of the system of Fig. 1 in accordance with a preferred embodiment of the 
present invention; 

Fig. 3 is a simplified pictorial flow illustration of an anti-hacking method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention; 

Fig. 4 is a simplified pictorial flow illustration of an anti-hacking method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention; 

Fig. 5 is a simplified pictorial flow illustration of an anti-hacking method for use 

with the system of Fig. 1 in accordance with another preferred embodiment of the present 
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Fig. 6 is a simplified pictorial flow illustration of a file protection method for use 
mth the system of Fig. 1 operative in accordance with another preferred embodiment of the present 



Fig. 7 is a simplified pictonal flow illustration of a file protection method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 



DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

Reference is now made to Fig. 1 which is a simplified block diagram of a system for 

preventing unauthorized copying of files, the system constructed and operative in accordance with a 

preferred embodiment of the present invention. In the system of Fig. 1 a server 10 is provided for 

communication with a client 12 via a communications network 14, such as the Internet or an 

Intranet. Server 10 is typically any known computer configured with web server software and 

communications software and hardware for communication via network 14 through a socket 16 as 

is well known. Examples of web server software include Internet Information Server™, 

commercially available from Microsoft Corporation, and Netscape HTTP Server™, commercially 

available from Netscape Corporation. Client 12 is typically any known computer configured with a 

web browser and communications software and hardware for communication via network 14 

through a socket 18 as is well known. Examples of web browser software include Internet 

Explorer™ version 3.02, commercially available from Microsoft Corporation, and Netscape 

Navigator™ version 2, commercially available from Netscape Corporation. 

Server 10 typically includes a storage 20 for storing files, such as HTML, GIF, JPEG, 

and other files, that server 10 may provide to requesting clients. Server 10 also typically includes a 

server configuration 22 which indicates to server 10 which client requests are to be forwarded to a 

filter 24 for processing. Filter 24 preferably refers to a protection map 26 in which a list of files on 
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storage 20 to be protected may be maintained. Filter 24 also typically ma.ntains an alias map 28 for 
mapping file aliases to real file names, as well as a cache 30 for storing processed files. Files 
processed by filter 24 may be sent to client 12 for additional processing by a protection module 32. 

A typical operational scenario of the system of Fig. 1 is now described with 
additional reference to simplified pictorial flow illustrations Figs. 2A and 2B, which are to be taken ' 
together. Operation begins with client 12 sending a request to server 10 for an HTML file. The 
request may be made using known means, such as by selecting a hyperlink to a World Wide Web 
page using a browser. Upon receiving the request from client 12, server 10 checks server 
configuration 22 to determine whether the requested file is of the type that is to be processed by 
filter 24 and, if it is, passes the request to filter 24. Filter 24 preferably checks protection map 26 to 
determine whether the requested file is protected or otherwise includes protected elements. For 
example, in the case of an HTML file, protection map 26 might indicate that the entire file is 
protected, and thus all files to which the file refers are to be protected. Similarly, protection map 
26 might indicate that an entire disk or directory is protected. Alternatively, protection map 26 
might indicate the names of specific files which are to be protected, or might simply indicate that 
the HTML file contains tags such as "<!protect>" and "<!/protect>" bounding a list of tags referring 
to files to be protected, such as "IMG" tags. If no level of protection is indicated, filter 24 may 
instruct server 10 to fulfil the request. 

Once filter 24 determines that some level of protection is required, filter 24 parses 
the HTML file and preferably replaces all tags that refer to a protected file with an appropriate 
substitute tag and related parameters needed to invoke the operation of protection module 32. Such 
tags may take the form of an "OBJECT" tag where protection module 32 is an ActiveX™ object for 
use with Internet Explorer™, or an "EMBED" tag where protection module 32 is a plug-in object 
for use with Internet Explorer™. Filter 24 also preferably substitutes a reference to the real file 
name of a protected file with a fictitious name that is preferably derivable from the real file name 
according to a predetermined algorithm in accordance with techniques well known in the art. Filter 
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24 preferably identifies the type of browser used from the client's request or otherwise in 
accordance with techniques well known in the art. Where an unsupported browser is detected, 
filter 24 may perform a contingency action such as replacing the tag with a link to an error message, 
replacing the file link with a link to an error message, or sending back the original tag with the real 
file name replaced with a fictitious file name in the same manner as described hereinbelow for ' 
protected files. Once the HTML file has been parsed and modified, filter 24 serves the modified 
file to client 12, typically by writing to socket 16 via which server 10 is currently communicating 
with client 12. 

Upon receiving the modified HTML file, client 12 invokes protection module 32 in 
accordance with the substituted "OBJECT" or "EMBED" tag. Protection module 32 then requests 
the protected file from server 10 using the fictitious file name. Once again server 10 checks server 
configuration 22 and determines that the request is to be forwarded to filter 24. Upon receiving the 
request filter 24 preferably derives the real file name from the fictitious file name using a 
predetermined algorithm as described above. Filter 24 then retrieves the file from storage 20 and 
preferably protects the file by encrypting, encoding, or otherwise modifying the file using a 
predetermined file protection algorithm, being any suitable algorithm known in the art for this 
purpose, preferably using an encryption key. Filter 24 may store the protected file in cache 30 for a 
period of time, allowing the file protection stage to be subsequently skipped and the protected file 
to be provided from cache 30 should the file be requested later. 

Filter 24 then serves the protected file to client 12 where protection module 32 
derives the original file using the same or a complementary file unprotection algorithm, and, where 
used, the same or a complementary encryption key being preconfigured with protection module 32, 
either hard-coded or derivable by protection module 32 using a key derivation algorithm, or 
otherwise sent to protection module 32 by filter 24. Protection module 32 then unprotects and 
displays, plays, presents, or otherwise outputs the original file using known techniques. 
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Protection module 32 preferably defeats file copying features at the operating system 
or application software level by disabling the Microsoft Windows™ "Print Screen," "Bitblt," 
"StretchBlt," or "GetPixel" functions. API calls such as "Bitblt," "StretchBlt," or "GetPixel" are 
preferably trapped and either prevented from copying and pasting the protected file or allowed to 
copy and paste a defaced, substituted, or otherwise modified file. "Print Screen" may similarly be 
disabled by trapping its API calls or by trapping the pressing of the "Print Screen" key and likewise 
defacing, substituting, or otherwise modifying the contents of the clipboard. Protection module 32 
may additionally or alternatively disable file saving features provided by browsers using known 
techniques. 

Reference is now made to Fig. 3 which is a simplified pictorial flow illustration of 
an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 3 protection module 32 periodically 
checks server 10 for updated components corresponding to components of protection module 32, 
such as DLL files. Upon detecting the existence of an updated component, protection module 32 
downloads the updated component for future use with files prepared in accordance with the method 
of Figs. 2A and 2B. In this manner an updated file preparation algorithm and/or key may be 
distributed to client 12 subsequent to a similar update of filter 24. 

Reference is now made to Fig. 4 which is a simplified pictorial flow illustration of 
an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 4 protection module 32 includes a 
hashing algorithm which may be used to hash software components of protection module 32 in 
order to derive a hash value. This hash value is preferably known in advance to filter 24 and may 
be appended or otherwise incorporated into the encyption key, either as is or after applying a 
modification algorithm to it, and used to prepare the file sent to client 12. Protection module 32 
may similarly incorporate the hash value into the encryption key for deriving the original file. As in 
Fig. 3, protection module 32 may periodically check server 10 for and download an updated 
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hashing algorithm. 

Reference is now made to Fig. 5 which is a simplified pictorial flow illustration of 
an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 5 protection module 32 includes a 
"blacklist" of known software applications known to have features which defeat anti-copying • 
measures taken by protection module 32. Upon detecting that such a blacklisted application is 
currently running, either by the application's name or by detecting a known footprint for the 
application, protection module 32 may withhold requesting a protected file, may prevent a 
protected file from being displayed, played, presented, or otherwise output, and/or may mar the 
presentation of the file, and may provide a message to the user requiring that the blacklisted 
application be terminated before the protected file may be presented properly. 

Reference is now made to Fig. 6 which is a simplified pictorial flow illustration of a 
file protection method for use with the system of Fig. I in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 6 client 12 sends a CGI request to 
server 10. Upon receiving the request from client 12, server 10 checks server configuration 22 to 
determine whether the request is of the type that is to be processed by filter 24 and, if it is, passes 
the request to filter 24. Filter 24 preferably appends a randomly-generated identifier to the CGI 
request and sends it back to server 10. Server 10 again checks server configuration 22, determines 
that the request is of the type that is to be processed by filter 24, and passes the CGI request back to 
filter 24. Filter 24 strips out the randomly-generated identifier and sends the CGI request to a CGI 
program 34 (Fig. 1) for processing. The CGI program then sends the results to server 10 which 
forwards the results to filter 24. Filter 24 preferably processes any files or HTML files received 
from the CGI program as described hereinabove with reference to Figs. 2A and 2B, protecting files 
as required, and serves the processed files to client 12. 

Reference is now made to Fig. 7 which is a simplified pictorial flow illustration of a 
file protection method for use with the system of Fig. 1 in accordance with another preferred 
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embodiment of the present invention. In the method of Fig. 7 client 12 sends a request for a file, 
such as an HTML file, to server 10. Upon receiving the request from client 12, server 10 checks 
server configuration 22 to determine whether the request is of the type that is to be processed by 
filter 24 and, if it is, passes the request to filter 24. Filter 24 then checks alias map 28 to determine 
if the requested file is actually an alias to be substituted with an HTTP request to server 10 or 
another server, the identity of which server is maintained in alias map 28 along with the alias file 
name. If alias map 28 indicates that the file is an alias, filter 24 then issues the subtitiute HTTP 
request to the server and address indicated in alias map 28. Upon receiving the requested HTML or 
file, filter 24 then preferably processes the file as described hereinabove with reference to Figs. 2A 
and 2B, protecting files as required, and serves the processed files to client 12. 

It is appreciated that components of the present invention may be implemented in 
computer hardware, software, or any suitable combination thereof using conventional techniques. 

It is appreciated that the steps of the methods described hereinabove need not 
necessarily be performed in the order shown, and that in fact different implementations of the steps 
may be employed to yield similar overall results. 

It will be appreciated by persons skilled in the art that the present invention is not 
limited by what has been particularly shown and described hereinabove. Rather the scope of the 
present invention includes both combinations and subcombinations of the features described 
hereinabove as well as modifications and variations thereof which would occur to a person of skill 
in the art upon reading the foregoing description and which are not in the prior art. 
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CLAIMS 



We claim: 



1 . A method for preventing unauthorized copying of files sent from a first computer to 

a second computer, the method comprising: 

(a) sending a request for a file from said second computer to said first computer; 

(b) determining at said first computer, in response to said request, whether said 
file is to be protected and, if so, protecting said file; 

(c) sending said protected file to said second computer; 

(d) disabling file copying capabilities at said second computer; 

(e) unprotecting said file at said second computer; and 

(f) outputting said file at said second computer. 

2 " A method according to claim 1 wherein any of said sending steps comprises sending 

via a network. 



3 - A method according to claim 1 wherein said first computer is a server and said 
second computer is a client. 

4 - A method according to claim 1 wherein said determining step (b) comprises 
protecting said file by encrypting said file using an encryption key and wherein said unprotecting 
step (e) comprises decrypting said encrypted file using said encryption key. 

5 - A method according to claim 1 wherein said second computer is configured with a 
MICROSOFT WINDOWS operating system and wherein said disabling step (d) comprises trapping 
any of print screen, bitblt, stretchblt, and getpixel function calls and, in response to said trapping, 
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replacing contents of a clipboard associated with said operating system with substitute contents. 

6. A method according to claim 1 wherein said second computer is configured with a 

MICROSOFT WINDOWS operating system and wherein said disabling step (d) comprises trapping 
any of print screen, bitblt, stretchblt, and getpixel function calls and, in response to said trapping, 
marring contents of a clipboard associated with said operating system. 

7 - A m et hod according to claim 1 wherein said outputting step (f) comprises displaying 

said file on a computer monitor. 

8 A method according to claim 1 wherein said outputting step (f) comprises outputting 

said file as sound. 

9 - A method according to claim 1 and further comprising: 

(g) maintaining at said first computer a list of files to be protected, and wherein 
said determining step (b) comprises determining whether said file requested in step (a) is in said list 
of files. 

10 - A method according to claim 1 and further comprising: 
prior to said sending a request step (a): 

(h) sending a request for an HTML file from said second computer to 

said first computer; 

(i) determining at said first computer, in response to said request, 
whether said HTML file comprises an instruction to retrieve a file to be protected; 

0') modifying said HTML file by replacing said instruction with an 
instruction to invoke a protection module for use in retrieving said file to be protected; and 
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(k) sending said modified HTML file to said second computer. 



1 L ' A method according to claim 10 wherein said modifying said HTML file step (h) 

comprises replacing the name of said file to be protected with a substitute file name. 

12. A method according to claim 11 wherein said modifying said HTML file step (h) 
comprises deriving said substitute file name from said name of said file to be protected using a 
predetermined file name derivation algorithm. 

13. A method according to claim 1 1 and further comprising: 

(1) maintaining at said first computer a mapping of names of files to be 
protected to corresponding substitute file names, and wherein said determining step (b) comprises 
determining whether the name of said file requested in step (a) is a substitute file name in said 
mapping and, if so, protecting said file to be protected corresponding to said substitute file name. 

14. A method according to claim 10 and further comprising configuring said second 
computer with said protection module. 

15. A method according to claim 14 wherein said protection module periodically checks 
a third computer for an updated component of said protection module and, if found, downloads said 
updated component. 

16. A method according to claim 1 wherein said determining step (b) comprises 

protecting said file by encrypting said file using an encryption key together with a predetermined 

hash value incorporated therein, and further comprising configuring said second computer with a 

protection module operative to hash a software component of said protection module, thereby 
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deriving said predetermined hash value, and incorporate said hash value into said encyption key, 
and wherein said unprotecting step (e) composes decrypting said encrypted file using said 
encryption key together with said derived hash value. 



17. A method according to claim 1 and further comprising: 

configuring said second computer with a blacklist of known software applications, 
and wherein said outputting step (f) comprises outputting only if none of said blacklisted 
applications are currently running on said second computer. 



A method for serving a CGI request by proxy, the method comprising: 

sending a CGI request from a client to a server; 

forwarding said CGI request from said server to a filter; 

appending at said filter an identifier to the CGI request; 

sending said CGI request with identifier from said filter to said server; 

forwarding said CGI request with identifier from said server to a filter; 

removing at said filter said identifier from said CGI request; 

sending said CGI request from said filter to a CGI program; 

processing said CGI request at said CGI program; 

receiving at said server results from said CGI program, 

sending said results from said server to said filter; 

processing said results at said filter; and 

sending said processed results to said client. 

A method for serving an aliased HTTP request, the method comprising: 
sending a request for a file from a client to a first server; 
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issuing a subst.tute HTTP request corresponding to said requested file to a second 

receiving at said first server results of said substitute HTTP request; 

processing said results at said first server; and 

sending said processed results to said client. 

A method substantially as shown and described above. 

A method substantially as illustrated in any of the drawings. 

For the Applicant, 



Sanford T. Colb & Co. 
C33096 
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FIG. 2B 
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FIELD OF THE INVENTION 
The present invention relates to network security in general and particularly to 
methods and apparatus for preventing unauthorized copying of images transmitted via computer 
networks. 

BACKGROUND OF THE INVENTION 
Preventing unauthorized copying of images transmitted via computer networks is 
difficult given the current state of the art. Typically, a computer terminal or "client" connected to a 
network, such as the Internet, sends a request using software known as a "browser" to a "server" 
also connected to the network. Such requests are often for "Web pages," documents constructed 
using Hypertext Markup Language or HTML, and their associated images which are then sent by 
the server and rendered by the client browser for viewing. Images are typically received at the 
client in a standard format such as GIF or JPEG, are automatically stored at the client, and may be 
easily copied and pasted, allowing for unrestricted future reuse, often in violation of copyright laws. 

SUMMARY OF THE INVENTION 

The present invention seeks to provide improved methods and apparatus for 
preventing unauthorized copying of images transmitted via computer networks that overcome the 
known disadvantages of the prior art as discussed above.. 

There is thus provided in accordance with a preferred embodiment of the present 
invention a method for preventing unauthorized copying of images, the method including protecting 
an image file on a first computer using a protection algorithm, providing the protected image to a 
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second computer, disabling image copying functions on the second computer, and unprotecting the 

protected image on the second computer for display using an unprotection algorithm. 

Further in accordance with a preferred embodiment of the present invention the 
^protecting step includes protecting using an encryption key. 

Still further in accordance with a preferred embodiment of the present invention the 
encryption key includes a hash value component. 

Additionally in accordance with a preferred embodiment of the present invention the 
method further includes modifying an HTML file that includes at least one link to the protected 
image by substituting IMG tags of protected images with calls to image unprotection software on 
the second computer. 

Further in accordance with a preferred embodiment of the present invention the 
modifying step includes replacing file names of the protected images with derived file names using 
a file name derivation algorithm. 

It is noted that throughout the specification and claims the term "user" as it is used 
with respect to the use of a computer may refer to a human or surrogate therefor in combination 
with the computer interface with which the human or surrogate interacts. Thus, unless otherwise 
specified, a reference to a user may connote a reference to the user's computer interface, and a 
reference to a user's computer interface may connote a reference to the user. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will be understood and appreciated more fully from the 
following detailed description, taken in conjunction with the drawings in which; 

Fig. 1 is a simplified block diagram of a system for preventing unauthorized copying 
of images, the system constructed and operative in accordance with a preferred embodiment of the 
present invention; 
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.. ^_ . taken together, are simplified pictorial flow illustrations of a 

rnethod of operation of the system of Fig. 1 in accordance with a preferred embodiment of the 

present invention; 

^ Fig. 3 is a simplified pictorial flow illustration of an anti-hacking method for use 

with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention; 

Fig. 4 is a simplified pictorial flow illustration of an anti-hacking method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention; 

Fig. 5 is a simplified pictorial flow illustration of an anti-hacking method for use 
with the system of Fig. 1 in accordance with another preferred embodiment of the present 
invention; 

Fig. 6 is a simplified pictorial flow illustration of an image protection method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention; and 

Fig. 7 is a simplified pictorial flow illustration of an image protection method for use 
with the system of Fig. 1 operative in accordance with another preferred embodiment of the present 
invention. 



DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
Reference is now made to Fig. 1 which is a simplified block diagram of a system for 
preventing unauthorized copying of images, the system constructed and operative in accordance 
with a preferred embodiment of the present invention. In the system of Fig. 1 a server 1 0 is 
provided for communication with a client 12 via a communications network 14, such as the Internet 
or an Intranet. Server 10 is typically any known computer configured with web server software and 
communications software and hardware for communication via network 14 through a socket 16 as 
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is well known. Examples of web server software include Internet Information Server™, 

commercially available from Microsoft Corporation, and Netscape HTTP Server™, commercially 
available from Netscape Corporation. Client 12 is typically any known computer configured with a 
web browser and communications software and hardware for communication via network 14 
through a socket 18 as is well known. Examples of web browser software include Internet 
Explorer™ version 3.02, commercially available from Microsoft Corporation, and Netscape 
Navigator™ version 2, commercially available from Netscape Corporation. 

Server 10 typically includes a storage 20 for storing files, such as HTML, GIF, JPEG, 
and other files, that server 10 may provide to requesting clients. Server 10 also typically includes a 
server configuration 22 which indicates to server 10 which client requests are to be forwarded to a 
filter 24 for processing. Filter 24 preferably refers to a protection map 26 in which a list of files on 
storage 20 to be protected may be maintained. Filter 24 also typically maintains an alias map 28 for 
mapping file aliases to real file names, as well as a cache 30 for storing processed image files. Files 
processed by filter 24 may be sent to client 12 for additional processing by an image client 32. 

. A typical operational scenario of the system of Fig. 1 is now described with 
additional reference to simplified pictorial flow illustrations Figs. 2A and 2B, which are to be taken 
together. Operation begins with client 12 sending a request to server 10 for an HTML file. The 
request may be made using known means, such as by selecting a hyperlink to a World Wide Web 
page using a browser. Upon receiving the request from client 12, server 10 checks server 
configuration 22 to determine whether the requested file is of the type that is to be processed by 
filter 24 and, if it is, passes the request to filter 24. Filter 24 preferably checks protection map 26 to 
determine whether the requested file is protected or otherwise includes protected elements. For 
example, in the case of an HTML file, protection map 26 might indicate that the entire file is 
protected, and thus all images to which the file refers are to be protected. Similarly, protection map 
26 might indicate that an entire disk or directory is protected. Alternatively, protection map 26 
migfij indicate the names of specific image files which are to be protected, or might simply indicate 
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that the HTML file contains tags such as "<!protect>" and "<!/protect>" bounding a list of "IMG" 

tags with images to be protected. If no level of protection is indicated, filter 24 may instruct server 
10 to fulfil the request. 

^ Once filter 24 determines that some level of protection is required, filter 24 parses 

the HTML file and preferably replaces all "IMG" tags associated with a protected image with an 
appropriate substitute tag and related parameters needed to invoke the operation of image client 32. 
Such tags may take the form of an "OBJECT" tag where image client 32 is an ActiveX™ object for 
use with Internet Explorer™, or an "EMBED" tag where image client 32 is a plug-in object for use 
with Internet Explorer™. Filter 24 also preferably substitutes a reference to the real file name of a 
protected image with a fictitious name that is preferably derivable from the real file name according 
to a predetermined algorithm in accordance with techniques well known in the art. Filter 24 
preferably identifies the type of browser used from the client's request or otherwise in accordance 
with techniques well known in the art. Where an unsupported browser is detected, filter 24 may 
perform a contingency action such as replacing the "IMG" tag with a link to an error message, 
replacing the image link with a link to an error message image, or sending back the original "IMG" 
tag with the real image file name replaced with a fictitious image file name in the same manner as 
described hereinbelow for protected images. Once the HTML file has been parsed and modified, 
filter 24 serves the modified file to client 12, typically by writing to socket 16 via which server 10 is 
currently communicating with client 12. 

Upon receiving the modified HTML file, client 12 invokes image client 32 in 
accordance with the substituted "OBJECT" or "EMBED" tag. Image client 32 then requests the 
protected image from server 10 using the fictitious image file name. Once again server 10 checks 
server configuration 22 and determines that the request is to be forwarded to filter 24. Upon 
receiving the request filter 24 preferably derives the real image file name from the fictitious image 
file name using a predetermined algorithm as described above. Filter 24 then retrieves the image 
fi ]e frpm Stprage 20 and preferably protects the image by encrypting, encoding, or otherwise 
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modifying the image file using a predetermined image protection algorithm, being any suitable 

algorithm known in the art for this purpose/preferably using an encryption key. Filter 24 may store 
the protected image in cache 30 for a period of time, allowing the image file protectionstage to be 
^subsequently skipped and the protected image file to be provided from cache 30 should the image 
be requested later. 

Filter 24 then serves the protected image to client 12 where image client 32 derives 
the original image using the same or a complementary image unprotection algorithm, and, where 
used, the same or a complementary encryption key being preconfigured with image client 32, either 
hard-coded or derivable by image client 32 using a key derivation algorithm, or otherwise sent to 
image client 32 by filter 24. Image client 32 then unprotects and displays the original image using 
known techniques. 

Image client 32 preferably defeats image copying features at the operating system or 
application software level by disabling the Microsoft Windows™ "Print Screen," "Bitblt," 
"StretchBlt," or "GetPixel" functions. API calls such as "Bitblt," "StretchBlt," or "GetPixel" are 
preferably trapped and either prevented from copying and pasting the protected image or allowed to 
copy and paste a defaced, substituted, or otherwise modified image. "Print Screen" may similarly 
be disabled by trapping its API calls or by trapping the pressing of the "Print Screen" key and 
likewise defacing, substituting, or otherwise modifying the contents of the clipboard. Image client 
32 may additionally or alternatively disable image saving features provided by browsers using 
known techniques. 

Reference is now made to Fig. 3 which is a simplified pictorial flow illustration of 
an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 3 image client 32 periodically checks 
server 10 for updated components corresponding to components of image client 32, such as DLL 
files. Upon detecting the existence of an updated component, image client 32 downloads the 
upd^d component for future use with images prepared in accordance with the method of Figs. 2A 
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ed image preparation algorithm and/or key may be distributed to 

client 12 subsequent to a similar update of filter 24. 

Reference is now made to Fig. 4 which is a simplified pictorial flow illustration of 

an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 

embodiment of the present invention. In the method of Fig. 4 image client 32 includes a hashing 

algorithm which may be used to hash software components of image client 32 in order to derive a 

hash value. This hash value is preferably known in advance to filter 24 and may be appended or 

otherwise incorporated into the encyption key, either as is or after applying a modification 

algorithm to it, and used to prepare the image file sent to client 12. Image client 32 may similarly 

incorporate the hash value into the encryption key for deriving the original image. As in Fig. 3, 

image client 32 may periodically check server 10 for and download an updated hashing algorithm. 

Reference is now made to Fig. 5 which is a simplified pictorial flow illustration of 

an anti-hacking method for use with the system of Fig. 1 in accordance with another preferred 

embodiment of the present invention. In the method of Fig. 5 image client 32 includes a "blacklist" 

of known software applications known to have features which defeat anti-copying measures taken 

by image client 32. Upon detecting that such a blacklisted application is currently running, either 

by the application's name or by detecting a known footprint for the application, image client 32 

may withhold requesting a protected image, may prevent a protected from being displayed, and/or 

may mutilate the displayed image, and may provide a message to the user requiring that the 

blacklisted application be terminated before the protected image may be viewed properly. 

Reference is now made to Fig. 6 which is a simplified pictorial flow illustration of 

an image protection method for use with the system of Fig. 1 in accordance with another preferred 

embodiment of the present invention. In the method of Fig. 6 client 12 sends a CGI request to 

server 10. Upon receiving the_request from client 12, server 10 checks server configuration 22 to 

determine whether the request is of the type that is to be processed by filter 24 and, if it is, passes 

the request to filter 24. Filter 24 preferably appends a randomly-generated identifier to the CGI 
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request and sends it back to server 10. Server 10 again checks server configuration 22, determines 

that the request is of the type that is to be processed by filter 24, and passes the CGI request back to 
filter 24. Filter 24 strips out the randomly-generated identifier and sends the CGI request to a CGI 
program 34 (Fig. 1) for processing. The CGI program then sends the results to server 10 which 
forwards the results to filter 24. Filter 24 preferably processes any image files or HTML files 
received from the CGI program as described hereinabove with reference to Figs. 2A and 2B, 
protecting image files as required, and serves the processed files to client 12. 

Reference is now made to Fig. 7 which is a simplified pictorial flow illustration of 
an image protection method for use with the system of Fig. 1 in accordance with another preferred 
embodiment of the present invention. In the method of Fig. 7 client 12 sends a request for a file, 
such as an HTML file, to server 10. Upon receiving the request from client 12, server 10 checks 
server configuration 22 to determine whether the request is of the type that is to be processed by 
filter 24 and, if it is, passes the request to filter 24. Filter 24 then checks alias map 28 to determine 
if the requested file is actually an alias to be substituted with an HTTP request to server 10 or 
another server, the identity of which server is maintained in alias map 28 along with the alias file 
name. If alias map 28 indicates that the file is an alias, filter 24 then issues the subtitiute HTTP 
request to the server and address indicated in alias map 28. Upon receiving the requested HTML or 
image file, filter 24 then preferably processes the file as described hereinabove with reference to 
Figs. 2A and 2B, protecting image files as required, and serves the processed files to client 12. 

It is appreciated that components of the present invention may be implemented in 
computer hardware, software, or any suitable combination thereof using conventional techniques. 

It is appreciated that the steps of the methods described hereinabove need not 
necessarily be performed in the order shown, and that in fact different implementations of the steps 
may be employed to yield similar overall results. 

It will be appreciated by persons skilled in the art that the present invention is not 
limited by what has been particularly shown and described hereinabove. Rather the scope of the 
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present invention includes both combinations and subcombinations of the features described 

hereinabove as well as modifications and variations thereof which would occur to a person of skill 
in the art upon reading the foregoing description and which are not in the prior art. 
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EXHIBIT B 

CLAIMS 



We claim: 



A method for preventing unauthorized copying of images, the method comprising: 




protecting an image file on a first computer using a protection algorithm; 



providing said protected image to a second computer; 



disabling image copying functions on said second computer; and 



unprotecting said protected image on said second computer for display using an 



unprotection algorithm. 

2 - A method according to claim 1 wherein said protecting step comprises protecting 
using an encryption key. 

3 - A method according to claim 2 wherein said encryption key comprises a hash value 
component. 

4 - A method according to claim 1 and further comprising modifying an HTML file that 
. comprises at least one link to said protected image by substituting IMG tags of protected images 

with calls to image unprotection software on said second computer. 

5 - A method according to claim 4 wherein said modifying step comprises replacing file 
names of said protected images with derived file names using a file name derivation algorithm. 

6- A method substantially as shown and described above. 



7. 



A method substantially as illustrated in any of the drawings. 




Sanford T. Colb & Co. 
C:32789 



Previously Submitted 



10 



COPY 




Previously Submitted 
COPY 



CSAFE LTD. 



EXHIBIT B 



8 —m£TS : SHEET NO . 2 



CLIENT REQUESTS 
FILE FROM SERVER 




SERVER PASSES 
REQUEST TO 
FILTER 




FILTER INSTRUCTS 
SERVER TO 
FULFIL REQUEST 



PARSE HTML FILE, 
SUBSTITUTING IMG 
TAGS WITH CALLS 
IMAGE CLIENT OR 
CONTINGENCY ACTION 



SUBSTITUTE IMAGE 
FILE NAMES WITH 
FICTITIOUS FILE NAMES 



SEND MODIFIED 
HTML FILE TO 
CLIENT 




FIG. 2A 



Previously Submitted 
COPY 



CLIENT RECEIVES 
MODIFIED HTML FILE 
FROM SERVER 



CLIENT INVOKES 
IMAGE CLIENT AS 
INDICATED BY TAG 



IMAGE CLIENT 
REQUESTS PROTECTED 
IMAGE FROM SERVER 



EXHIBIT B 



a SHiiKTS : SHiiJiT NO . 3 









FILTER PROTECTS 
IMAGE, STORES IN 
CACHE 







FILTER SENDS 
PROTECTED IMAGE 
TO CLIENT 



SERVER FORWARDS 
REQUEST TO 
FILTER 







FILTER [ 
IMAGE Fl 
FROM FICTI1 
AND RETR 


)ERIVES 
LE NAME 
r IOUS NAME 
EVES FILE 



IMAGE CLIENT 
DISABLES SYSTEM/ 
APPLICATION COPYING 
FEATURES 






IMAGE 
UNPROTE 
DISPLAY 


CLIENT 
CTS AND 
S IMAGE 



J 

I finish) 



FIG. 2B 



Previously Submitted 
COPY 



CSAFE LTD - 




8 HEETS : SHEET NO . 4 



CHECK SERVER FOR 
UPDATED COMPONENTS 



f DOWNLOADS ANY 
I UPDATED COMPONENTS 



Fig. 3 



Previously Submitted 
COPY 



CHAFE ^ LTD . EXHIBIT B 8_"TEETS : SHEET NO . 5 




elASH SOFTWARE \ 
:OMPONENTS OF 
IMAGE CLIENT 
ERIVE A HASH VALUE 

INCORPORATE \ 

HASH VALUE \ 
rNTO THE 

ENCYPTION KEY > 



/ DERIVE THE 



ORIGINAL IMAGE 
USING ENCRYPTION KEY 



PERIODICALLY CHECK 
SERVER AND 
DOWNLOAD AN 
.UPDATED HASHING ALGORITHM. 





Fig. 4 



Previously Submitted 
COPY 




8 7 .EETS : SHEET NO. 6 



CHECK '-BLACKLIST" 
FOR CURRENTLY 

RUNNING BLACKLISTED 
APPLICATION USING 
APPLICATION NAME 

V OR FOOTPRINT 



WITHHOLD REQUESTING 

A PROTECTED IMAGE, 
PREVENT A PROTECTED 
FROM BEING DISPLAYED, 

AND/OR MUTILATE 
^ THE DISPLAYED IMAGE 



f PROVIDE A MESSAGE i 
TO THE USER 
REQUIRING THAT THE 
BLACKLISTED APPLICATION 
V BE TERMINATED _J 




Fig. 5 



Previously Submitted 
COPY 



EXHIBIT B 



8 °HEETS : SHEET NO. 7 



CLIENT SENDS CGI 
REQUEST TO 
SERVER 



SERVER PASSES 
REQUEST TO 
FILTER 



FILTER APPENDS 
RANDOMLY-GENERATED 
IDENTIFIER TO 
CGI REQUEST 



FILTER SENDS 
CGI REQUEST 
WITH IDENTIFIER 
TO SERVER 



SERVER PASSES 
REQUEST BACK 
TO FILTER 



FILTER STRIPS 
OUT IDENTIFIER 



FILTER SENDS 
CGI REQUEST ' 
TO CGI PROGRAM 



FIG. 6 



CGI PROGRAM 
SENDS RESULTS 
TO SERVER 



SERVER SENDS 
CGI RESULTS 
TO FILTER 



Previously Submitted 
COPY 



CSAFE LTD. i — I, " " ' 8 SHEETS : SHEET NO 8 

' ' ' , I m EXHIBIT B A 



CLIENT REQUESTS 
FILE FROM SERVER 




SERVER SERVES 
FILE TO CLIENT 



SERVER PASSES 
REQUEST TO 
FILTER 




PERFORM FILE 
PROTECTION 
PROCEDURES 
(FIGS. 2A&2B) 



FILTER MAKES 
HTTP REQUEST 
TO SUBSTITUTE 
SERVER/ADDRESS 
, : 



SERVER RECEIVES 
RESULTS FROM 
SUBSTITUTE 
SERVER/ADDRESS 



FIG. 7 



Previously Submitted 
COPY 



EXHIBIT C 



•awe* 



UNITED STATESDEPARTMENT OF COMMERCE 
Patent and Trademark Office 



NOTICE OF ALLOWANCE AND ISSUE FEE DUE 

RECEIVED 
MAY 0 7 2001 
fENWICK&WESTLLR 



APPUCATION NO. 



TOTAL CLAIMS 



EXAMINER AND GROUP ART Ul 



ATTYS DOCKET NO. | CLASS-SUBCLASS | BATCH NO, | APPLN. TYPE | SMALL ENTITY | FEE DUE 



THE APPUCATION IDENTIFIED ABOVE HAS BEEN EXAMINED AND IS ALLOWED FOR ISSUANCE AS A PATENT. 
PROSECUTION ON THE MERITS IS CLOSED. 

THE ISSUE FEE MUST BE PAID WITHIN THREE MONTHS FROM THE MAILING DATE OF THIS NOTICE OR THIS 
APPLICATION SHALL BE REGARDED AS ABANDONED. THIS STATUTORY PERIOD CANNOT BE EXTENDED. 

HOW TO RESPOND TO THIS NOTICE: 

I. Review the SMALL ENTITY status shown above. 
If the SMALL ENTITY is shown as YES, verify your 
current SMALL ENTITY status: . 

A. If the status is changed, pay twice the amount of the 
FEE DUE shown above and notify the Patent and 
Trademark Office of the change in status, or 

B. If the status is the same, pay the FEE DUE shown 
above. 



If the SMALL ENTITY is shown as NO: 



A. Pay FEE DUE shown above, or 



B. File verified statement of Small Entity Status before, or with, 
payment of 1/2 the FEE DUE shown above. 

II. Part B-lssue Fee Transmittal should be completed and returned to the Patent and Trademark Office (PTO) with your 
ISSUE FEE. Even if the ISSUE FEE has already been paid by charge to deposit account, Part B Issue Fee Transmittal 
should be completed and returned. If you are charging the ISSUE FEE to your deposit account, section a 4b" of Part 
B-lssue Fee Transmittal should be completed and an extra copy of the form should be submitted. 

III. All communications regarding this application must give application number and batch number. 
Please direct all communications prior to issuance to Box ISSUE FEE unless advised to the contrary. 

IMPORTANT REMINDER: Utility patents issuing on applications filed on or after Dec. 12, 1980 may require payment of 
maintenance fees. It Is patentee's responsibility to ensure timely payment of maintenance 
fees when due. 



YOUR COPY 



FTOL-B5 (REV. 10-96) Approved for use through 06/30/99. (0651-0033) 



Previously Submitted 
COPY 



EXHIBIT C 



Notice of Allowability 



Application No. 

09/397,331 


Applicant(s) 

SCHREIBER ETAL. 


Examiner 

Bryce P Bonzo 


Art Unit 
2184 





initiative of the Office or upon petition by the applicant. See 37 CFR 1 .313 and MPEP 1308. 

1. EO This communication is responsive to Amendment C of4/23/0i . 

2. S The allowed claim(s) is/are 151-162 .' 

3. □ The drawings filed on are acceptable as formal drawings. 

4. [X] Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(c) or (f). 

a) £3 A" b) □ Scne* c) □ None of the: 

1 . M Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

5. [x] Acknowledgement is made of a claim for domestic priority under 35 U.S.C. § 119(e). 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements noted 
below. Failure to timely comply will result in ABANDONMENT of this application. THIS THREE-MONTH PERIOD S NOT FXTFNnARY f 
FOR SUBMITTING NEW FORMAL DRAWINGS , OR A SUBSTITUTE^ATH OR D E C L ARAT I O N This ^h ree^m on thpe ri ocl for 
complying with the REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL is extendable unde^TcFR 11 36(a) 

6. □ Note the attached EXAMINER'S AMENDMENT or NOTICE OF INFORMAL APPLICATION (PTO-152) which gives reason(s) why 

the oath or declaration is deficient. A SUBSTITUTE OATH OR DECLARATION IS REQUIRED. 

7. El Applicant MUST submit NEW FORMAL DRAWINGS : 

(a) including changes required by the Notice of Draftsperson's Patent Drawing Review( PTO-948) attached 

1) □ hereto or 2) 0 to Paper No. 16. ; 

(b) □ including changes required by the proposed drawing correction filed which has been approved by the examiner. 

(c) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of Paper No. . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings. The drawings 
should be filed as a separate paper with a transmittal letter addressed to the Official Draftsperson. 

8. □ Note the attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 

Any reply to this letter should include, in the upper right hand corner, the APPLICATION NUMBER (SERIES CODE / SERIAL NUMBER) If 
applicant has received a Notice of Allowance and Issue Fee Due, the ISSUE BATCH NUMBER and DATE of the NOTICE OF 
ALLOWANCE should also be included. 



Attachment(s) 

1 □ Notice of References Cited (PTO-892) 
3D Notice of Draftperson's Patent Drawing Review (PTO-948) 
5D Information Disclosure Statements (PTO-1449), Paper No. _ 
7D Examiner's Comment Regarding Requirement for Deposit 
of Biological Material 



PTO-37 fRev. 01-01) 



2Q Notice of Informal Patent Application (PTO-152) 

4D Interview Summary (PTO-41 3), Paper No. . 

6Q Examiner's Amendment/Comment 

8D Examiner's Statemefrtpof Reasons forAllowance 

/SUPERVISORV PATEMT EXAMINER 
/ TECHNOLOGY CENTER 2100 



Previously Submitted 
COPY 



EXHIBIT C 



UNITED STATES 

Patant and TMdwurh 

ASSISTANT BCCRETARYAWt 
OF PATENTS AND VWXMAPKB 
Washington. D C. 2CC31 



DEPARTMENT OF COMM1ROE 



Dear Patent and Trademark Office Customer 

The Technical Support Staff of Technology Center 2100 has undertaken continuous 
quality improvement efforts to ensure that the accompanying correspondence meets high 
quality standards, and focuses on good customer service. It is important to us that you 
are satisfied with the services we provide. 

If the contents of the attached correspondence has any clerical omissions, 
e.g., missing references or pages, illegible text, other problems or concerns of this nature 
which you wish to bring to my attention, please call or fax me as soon as possible. I will 
take the appropriate action to expedite the necessary corrections. 




Veriene D. Great 

Head,Supervisory kegaJ Instruments Examiner 
Technology Center 2100 
(703) 305-4376 



Fax No. (703) 308-9051 or (703) 308-9052 



Attention: Policy on Returning Phone Calls 

A PTO-wide customer Service standard is if a PTO employee being called is not available, they will 
return your call by the next business day, or, it you request, an alternate point of contact will be 
provided. Technology Center 2100 is committed to meeting this service standard. If you have called any 
employee in our Technology Center and have not received a return phone call within one (1) business 
day or have not been provided another point of contact, please contact the Technology Center at 
703-306-5631. We ensure that you will receive a return phone call, from an employee with the ability to 
assist you, within four (4) business hours of this contact. We appreciate your help in assisting us to help 
you. 



Previously Submitted 
COPY 



EXHIBIT D 



PATENT 

DOCKET NO.: 6866-101XX/993057 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Application of: 
Daniel SCHREIBER et al. 

U. S. Serial No.: 09/313,067 
Filed: May 17, 1999 

For: METHODS AND APPARATUS FOR 
PREVENTING REUSE OF TEXT, 
IMAGES AND SOFTWARE 
TRANSMITTED VIA NETWORKS 



LETTER 



COMMISSIONER OF 
PATENTS AND TRADEMARKS 
Washington, D. C. 20231 

Dear Sir: 

Enclosed herewith is a certified copy of Israeli Patent Application No. 124,895 
from which priority is claimed under 35 U.S.C. 1 19 and Rule 55b. 

Respectfully submitted, 

Robert Berliner^Esq. 
Registration No. 20,121 




July 6, 1999 

FULBRIGHT & JAWORSKI L.L.P. 
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